Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7ae2da3-b81d-3a8c-a7b9-00930360e61a.roa
File:                     e7ae2da3-b81d-3a8c-a7b9-00930360e61a.roa (raw, json)
Hash identifier:          L98KWf5jyl9gy83jiyIYTNd3HD+vBrgACMN7mDL4Ol0=
Subject key identifier:   01:D5:19:0F:1A:6D:35:0D:9F:C2:81:7B:B6:7C:24:7E:14:57:57:B7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909B7DE9CB94210DE45200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7ae2da3-b81d-3a8c-a7b9-00930360e61a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.62.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9b:7d:e9:cb:94:21:0d:e4:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=daa092e7-2ed9-4341-bbca-e5b9a269aa21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:f1:21:81:0d:e7:75:ef:32:07:75:7f:24:
                    04:0b:a0:2c:dd:a6:47:03:5e:2b:48:52:04:24:2d:
                    1c:4f:3e:5b:27:28:c7:bc:4e:23:6d:5a:98:78:7a:
                    d2:19:16:c3:e4:54:7a:44:84:7f:bd:b8:60:5e:e7:
                    f2:62:d2:ff:0b:46:d5:ad:71:e7:b3:46:63:0d:39:
                    9e:64:c7:43:76:1f:72:f8:0e:97:72:7e:db:43:50:
                    c5:6d:83:a1:ce:e8:a9:5d:d5:c5:5b:a2:94:75:7d:
                    56:98:21:c1:e4:17:67:14:1f:f0:9f:d2:0b:bd:54:
                    ac:91:0b:63:3a:f1:d0:30:d4:e5:14:98:7e:0b:08:
                    fc:d9:f6:27:bb:7d:1b:b7:32:36:4a:24:60:51:d0:
                    b6:ac:38:86:df:f2:55:25:c7:c1:94:3a:00:41:4d:
                    d6:8f:38:4e:19:d0:e3:73:ad:90:47:68:d1:11:df:
                    12:6c:45:fa:95:de:40:9f:ad:43:e8:70:29:a0:ae:
                    39:d2:50:cc:d1:0a:da:d5:03:20:ab:a2:ef:46:52:
                    ee:1b:6a:74:cf:cb:5a:d2:77:d2:f6:45:c9:03:d7:
                    de:a5:7d:d0:b4:3d:29:a2:e1:8d:8b:98:78:9b:72:
                    9e:2c:c2:f6:57:cb:18:82:c6:aa:f5:3e:87:7d:38:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:19:0F:1A:6D:35:0D:9F:C2:81:7B:B6:7C:24:7E:14:57:57:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7ae2da3-b81d-3a8c-a7b9-00930360e61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:85:7f:1f:d7:7c:d8:dd:89:ae:27:54:02:7b:f8:5e:9c:
         40:02:f6:fd:dc:dc:46:94:9c:1e:c3:1e:e6:cd:ac:73:75:8e:
         7d:35:8a:88:c2:54:f1:43:cc:bc:05:33:b0:7f:d6:92:0b:34:
         d1:21:e4:69:4d:b3:2e:c0:b7:ee:e8:15:01:80:c3:a2:82:7d:
         dd:45:5c:15:74:bf:46:a5:5a:43:9b:46:b0:f4:b0:58:37:05:
         8d:ab:0c:70:c3:5f:ec:16:f6:11:a9:04:bf:c6:18:ad:f8:9d:
         b0:6c:b0:eb:d9:9a:7c:b4:5a:66:65:c7:5b:05:52:25:0f:b1:
         3a:09:ef:13:85:b0:df:f2:74:f0:e9:5a:96:8c:c9:72:e5:24:
         bf:3f:f5:1d:3e:5f:e0:fa:fb:4e:1e:2e:b1:b7:e9:6b:3b:55:
         cc:62:96:31:fe:d7:0c:14:50:e0:9b:d8:4f:e6:c1:23:e4:0a:
         fc:cf:88:ad:9e:08:9f:c8:f2:ea:e6:7f:a3:fe:fa:88:e0:62:
         25:04:a0:42:8b:4f:6c:cc:93:e7:7b:10:61:d9:10:9f:c0:ea:
         95:e4:04:21:ea:bf:13:3a:5e:1c:6b:25:ad:46:29:a3:eb:45:
         e7:a2:f4:67:95:9e:eb:72:04:f9:fa:8f:ca:b9:9c:38:8e:59:
         f7:4a:ab:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJt96cuUIQ3kUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZGFhMDkyZTctMmVkOS00MzQxLWJiY2EtZTViOWEyNjlhYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iPxIYEN53XvMgd1fyQEC6As3aZHA14rSFIE
JC0cTz5bJyjHvE4jbVqYeHrSGRbD5FR6RIR/vbhgXufyYtL/C0bVrXHns0ZjDTme
ZMdDdh9y+A6Xcn7bQ1DFbYOhzuipXdXFW6KUdX1WmCHB5BdnFB/wn9ILvVSskQtj
OvHQMNTlFJh+Cwj82fYnu30btzI2SiRgUdC2rDiG3/JVJcfBlDoAQU3WjzhOGdDj
c62QR2jREd8SbEX6ld5An61D6HApoK450lDM0Qra1QMgq6LvRlLuG2p0z8ta0nfS
9kXJA9fepX3QtD0pouGNi5h4m3KeLML2V8sYgsaq9T6HfThRIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHVGQ8abTUNn8KBe7Z8JH4UV1e3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTdhZTJkYTMtYjgxZC0z
YThjLWE3YjktMDA5MzAzNjBlNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSlhX8f13zY3YmuJ1QCe/henEAC9v3c3EaUnB7DHubNrHN1jn01iojC
VPFDzLwFM7B/1pILNNEh5GlNsy7At+7oFQGAw6KCfd1FXBV0v0alWkObRrD0sFg3
BY2rDHDDX+wW9hGpBL/GGK34nbBssOvZmny0WmZlx1sFUiUPsToJ7xOFsN/ydPDp
WpaMyXLlJL8/9R0+X+D6+04eLrG36Ws7VcxiljH+1wwUUOCb2E/mwSPkCvzPiK2e
CJ/I8urmf6P++ojgYiUEoEKLT2zMk+d7EGHZEJ/A6pXkBCHqvxM6XhxrJa1GKaPr
Reei9GeVnutyBPn6j8q5nDiOWfdKqwY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:11:33 2025 by rpki-client